Skip to content

fix(topology): prevent security_confinement_disabled gauge from expiring#25910

Open
thomasqueirozb wants to merge 1 commit into
masterfrom
fix/confinement-gauge-expiry
Open

fix(topology): prevent security_confinement_disabled gauge from expiring#25910
thomasqueirozb wants to merge 1 commit into
masterfrom
fix/confinement-gauge-expiry

Conversation

@thomasqueirozb

Copy link
Copy Markdown
Member

Summary

The vector_security_confinement_disabled gauge was emitted once per sink at build time and its handle dropped immediately, so the metric aged out of the registry after the idle timeout (300s by default) while the sink was still running with confinement disabled. Ownership of the gauge is moved to the topology, which holds a handle for each confinement-aware sink's lifetime and reconciles the gauges on every (re)load.

Vector configuration

NA

How did you test this PR?

make check-clippy, make check-fmt, and make check-changelog-fragments all pass. Added src/topology/test/confinement_gauge.rs covering per-sink series at startup, absence for non-confinement sinks, and value updates on reload; the topology test suite passes (cargo nextest run --lib topology::test::).

Change Type

  • Bug fix
  • New feature
  • Dependencies
  • Non-functional (chore, refactoring, docs)
  • Performance

Is this a breaking change?

  • Yes
  • No

Does this PR include user facing changes?

  • Yes. Please add a changelog fragment based on our guidelines.
  • No. A maintainer will apply the no-changelog label to this PR.

References

NA

@github-actions github-actions Bot added domain: topology Anything related to Vector's topology code domain: sinks Anything related to the Vector's sinks labels Jul 20, 2026
@thomasqueirozb

Copy link
Copy Markdown
Member Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. What shall we delve into next?

Reviewed commit: 6db1b56057

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

@thomasqueirozb
thomasqueirozb marked this pull request as ready for review July 21, 2026 16:09
@thomasqueirozb
thomasqueirozb requested a review from a team as a code owner July 21, 2026 16:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

domain: sinks Anything related to the Vector's sinks domain: topology Anything related to Vector's topology code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant